|
cve-2026-55156
|
|
Token Optimizer MCP: Unauthenticated Path Traversal in…
|
ooples
|
token-optimizer-mcp
|
2026-09-28T17:48:21.086Z |
2026-09-28T18:11:38.212Z |
|
cve-2026-55157
|
|
Token Optimizer MCP: OS command injection in smart_use…
|
ooples
|
token-optimizer-mcp
|
2026-09-28T17:48:16.422Z |
2026-10-01T14:47:57.868Z |
|
cve-2026-101912
|
|
ip-address: isInSubnet() and isHostInSubnet() compare …
|
beaugunderson
|
ip-address
|
2026-09-28T17:48:06.990Z |
2026-09-28T19:13:25.495Z |
|
cve-2026-101911
|
|
ip-address: Address6 builds a parse diagnostic proport…
|
beaugunderson
|
ip-address
|
2026-09-28T17:46:52.711Z |
2026-10-01T14:46:01.003Z |
|
cve-2026-101910
|
|
ip-address: no classifier recognizes the NAT64 local-u…
|
beaugunderson
|
ip-address
|
2026-09-28T17:45:27.675Z |
2026-09-28T18:12:34.050Z |
|
cve-2026-101101
|
|
ag-ui-protocol ag-ui Middleware convert.ts JSON.parse …
|
ag-ui-protocol
|
ag-ui
|
2026-09-28T17:45:11.629Z |
2026-09-28T18:13:33.954Z |
|
cve-2026-101909
|
|
Axios: Prototype Pollution Gadget in axios toFormData …
|
axios
|
axios
|
2026-09-28T17:42:40.203Z |
2026-10-01T14:44:46.040Z |
|
cve-2026-75600
|
|
FreePBX: Authenticated API generatedocs Host Command I…
|
FreePBX
|
security-reporting
|
2026-09-28T17:41:41.633Z |
2026-09-29T15:34:11.672Z |
|
cve-2026-54710
|
|
FreePBX: Authenticated Superfecta Arbitrary PHP Code E…
|
FreePBX
|
security-reporting
|
2026-09-28T17:41:01.240Z |
2026-09-29T15:33:58.932Z |
|
cve-2026-54708
|
|
Authenticated Remote Code Execution via Path Traversal…
|
FreePBX
|
security-reporting
|
2026-09-28T17:40:43.836Z |
2026-09-29T15:33:44.408Z |
|
cve-2026-54675
|
|
FreePBX: Authenticated Remote Code Execution via File …
|
FreePBX
|
security-reporting
|
2026-09-28T17:40:21.519Z |
2026-09-28T18:14:02.788Z |
|
cve-2026-101908
|
|
Axios: Prototype pollution gadget in fetch adapter can…
|
axios
|
axios
|
2026-09-28T17:38:55.303Z |
2026-09-28T18:15:41.687Z |
|
cve-2026-54674
|
|
Authenticated Command Injection in FreePBX UCP Interface
|
FreePBX
|
security-reporting
|
2026-09-28T17:37:22.194Z |
2026-09-28T18:43:23.063Z |
|
cve-2026-45562
|
|
FreePBX: Authenticated Remote Code Execution in FreePB…
|
FreePBX
|
security-reporting
|
2026-09-28T17:36:08.431Z |
2026-09-28T18:37:05.448Z |
|
cve-2026-101907
|
|
Axios: maxRedirects: 0 is not enforced by the fetch ad…
|
axios
|
axios
|
2026-09-28T17:36:03.648Z |
2026-09-28T18:46:00.688Z |
|
cve-2026-101906
|
|
Axios: ReDoS (O(N²)) in shouldBypassProxy host normali…
|
axios
|
axios
|
2026-09-28T17:32:40.772Z |
2026-09-28T19:15:12.274Z |
|
cve-2026-101905
|
|
Axios: Node HTTP adapter prototype-pollution gadget al…
|
axios
|
axios
|
2026-09-28T17:31:00.916Z |
2026-10-01T14:42:48.243Z |
|
cve-2026-101100
|
|
ag-ui-protocol ag-ui Middleware filter-tool-calls.ts F…
|
ag-ui-protocol
|
ag-ui
|
2026-09-28T17:30:15.988Z |
2026-09-28T17:47:55.078Z |
|
cve-2026-101904
|
|
Axios: Header Injection via Inherited headers After Mi…
|
axios
|
axios
|
2026-09-28T17:29:10.996Z |
2026-09-28T17:49:57.529Z |
|
cve-2026-96740
|
6.5 (v3.1)
|
Streamshub/console: console-operator: streams for apac…
|
Red Hat
|
StreamsHub Console for Apache Kafka®
|
2026-09-28T17:27:44.240Z |
2026-11-03T17:42:38.420Z |
|
cve-2026-101903
|
|
Axios: ReDoS in fromDataURI data: URL parser freezes t…
|
axios
|
axios
|
2026-09-28T17:25:04.448Z |
2026-09-28T17:49:24.777Z |
|
cve-2026-101902
|
|
Axios: Prototype-Pollution Gadget in the Default Insta…
|
axios
|
axios
|
2026-09-28T17:22:49.113Z |
2026-09-28T19:30:19.510Z |
|
cve-2026-101901
|
|
Axios: Denial of Service via Unhandled 'error' Event …
|
axios
|
axios
|
2026-09-28T17:16:21.868Z |
2026-10-01T14:41:01.155Z |
|
cve-2026-101099
|
|
ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt…
|
ag-ui-protocol
|
ag-ui
|
2026-09-28T17:15:15.683Z |
2026-10-01T14:37:54.433Z |
|
cve-2026-101900
|
|
Axios: Fetch Adapter Header Injection via Inherited Fo…
|
axios
|
axios
|
2026-09-28T17:14:07.108Z |
2026-09-28T17:49:13.106Z |
|
cve-2026-101898
|
|
Axios: HTTP/2 adapter bypasses configured DNS lookup a…
|
axios
|
axios
|
2026-09-28T17:10:16.044Z |
2026-09-28T17:50:05.961Z |
|
cve-2026-101098
|
|
ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java rea…
|
ag-ui-protocol
|
ag-ui
|
2026-09-28T17:00:16.182Z |
2026-09-28T17:48:21.413Z |
|
cve-2026-101894
|
|
@xhmikosr/decompress: Path traversal via symlink chain
|
XhmikosR
|
decompress
|
2026-09-28T16:57:11.440Z |
2026-09-28T17:39:11.304Z |
|
cve-2026-86102
|
|
WatchGuard AP Command Injection in Internal Management…
|
WatchGuard
|
WatchGuard AP
|
2026-09-28T16:51:22.163Z |
2026-09-28T18:02:56.489Z |
|
cve-2026-87969
|
|
WatchGuard AP Authenticated Command Injection in Diagn…
|
WatchGuard
|
WatchGuard AP
|
2026-09-28T16:51:22.069Z |
2026-09-28T18:02:56.619Z |